The contract between you and us: what the service is, what you may do with it, what it costs, and where each of us stands if something goes wrong.
Effective 25 July 2026.
MCPmailer is operated by CROapps Oy, business ID 3550932-5, Pohjoinen Rautatiekatu 29B, 00100 Helsinki, Finland. "We" and "us" mean that company; "you" means the person or organisation using the service.
These terms cover the MCPmailer web application, the MCP endpoint, the REST API, the SDK and CLI, and the tunnel service. Using any of them means accepting these terms. If you are accepting on behalf of a company, you confirm you are allowed to bind it.
Three documents sit alongside these terms and form part of the agreement: the Acceptable Use Policy, the Privacy Policy, and, where we process personal data on your behalf, the Data Processing Addendum.
MCPmailer gives software agents email identities: an address on a domain you control or on a subdomain we provide, a mailbox, and tools to send, receive, and hold threaded conversations, along with shared workspace resources such as contacts, notes, templates, and an encrypted vault.
The service is aimed at conversational email sent by agents you operate. It is not a bulk-mail or newsletter platform, and quotas, per-message recipient limits, and abuse controls are built in on purpose. What is and is not allowed is set out in the Acceptable Use Policy.
We develop the service continuously. We may add, change, or remove features. If we remove something you rely on, or make a change that materially reduces the service, we will give you at least 30 days' notice by email where we reasonably can.
You are responsible for everything done through your account, including everything your agents do. An agent acting on your instructions is you, as far as these terms are concerned. Automation is not a defence to a breach of these terms.
API keys are shown once and stored hashed. Keep them secret, give each agent its own key, and revoke a key as soon as you suspect it has leaked. We cannot recover a key for you, and we are not liable for what someone does with a key you failed to protect.
An agent can provision a workspace for itself before any human has an account. Until that workspace is claimed, it is limited, and we may delete an unclaimed workspace that stays unclaimed and unused.
You must give us accurate account details and keep them current. We may suspend an account whose contact address bounces, because we have no other way to reach you about abuse or billing.
Mail your agents send and receive, contacts, notes, templates, and vault records are yours. You keep all rights in them. We claim no ownership.
You grant us the limited licence we need to run the service: to store, transmit, index for search, and process your content in order to deliver mail, show it back to you, and keep the service working and safe. That licence ends when the content is deleted.
We do not read message content, and we do not use it to train models. Enforcement is based on sending behaviour, bounce and complaint rates, and metadata, not on what your mail says. The narrow exceptions are set out in the Privacy Policy: an automated duplicate-content check that stores only a hash, and a specific legal demand we are required to comply with.
The vault is end-to-end encrypted. Secrets are encrypted before they reach us and we hold only ciphertext, an initialisation vector, a salt, and a verifier. We cannot decrypt them, which also means we cannot recover them if you lose your vault key. Keep a copy of it somewhere safe.
You are responsible for having the right to send what you send, including the right to contact the recipients and to hold their personal data.
The Acceptable Use Policy is binding. In short: no unsolicited bulk email, no more than five recipients per message, no impersonation, no illegal or harmful content, and no attempts to evade quotas or abuse controls.
We monitor delivery signals automatically. Workspaces with high bounce or complaint rates are throttled, and throttling lifts by itself once the signals recover. Serious or repeated abuse leads to a pause, which does not lift by itself.
We may suspend or limit an account immediately, without notice, where there is a real risk to recipients, to our sending reputation, or to the service itself. We will tell you what happened and, where the cause is fixable, what would restore the account.
We take care of the parts of deliverability we control: authentication, sending infrastructure, reputation monitoring, suppression lists, and honouring unsubscribes. Whether any individual message reaches an inbox is decided by the receiving provider, and no one can promise that.
You are responsible for the parts you control: verifying your domains, keeping DNS records in place, sending mail people want, and stopping when they ask you to. Failure to do so is the usual cause of a throttled workspace.
Plans and prices are on the pricing page. Paid plans are billed monthly in advance through Stripe, and usage above the included allowance is billed in arrears at the rate for your plan.
Prices exclude VAT and other applicable taxes, which are added where required. If you are a business in another EU country with a valid VAT number, reverse charge applies.
Payment is due when charged. If a payment fails we may retry, and if it keeps failing we may downgrade or suspend the account. Sending stops before your data is touched, and we will not delete anything solely because an invoice went unpaid without telling you first.
You can cancel at any time from the dashboard. Cancelling stops the next renewal; it does not refund the current period. We do not give pro-rata refunds for unused time, except where consumer law requires it.
We may change prices. Existing paid plans keep their price for at least 30 days after we email you about a change, and a price rise never applies retroactively to a period you have already paid for.
We aim for high availability but do not offer a contractual uptime guarantee or service credits on standard plans. Planned maintenance is announced in advance where it will be noticeable.
Support is through the contact form and is provided on a reasonable-efforts basis during Finnish business days. Abuse and security reports are handled with priority.
You can stop using the service at any time. We can terminate this agreement with 30 days' notice, or immediately if you materially breach these terms or the Acceptable Use Policy, or if we are legally required to.
When an account closes, sending stops immediately. Your data stays available for export for 30 days, and we delete it within 90 days of closure, except where we are legally required to keep something longer, such as invoices for accounting purposes.
You can delete a workspace, or your whole account, yourself from the settings page. Either erases everything inside it immediately, including the stored bytes of every message, cancels any subscription first, and cannot be undone.
The service is provided as it is. To the extent the law allows, we exclude implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that any message will be delivered.
Neither of us is liable for indirect or consequential loss, loss of profit, loss of business, or loss of data, however caused.
Our total liability under this agreement, for all claims taken together in any twelve-month period, is limited to the fees you paid us in the twelve months before the claim arose.
Nothing here excludes liability that cannot be excluded by law, including liability for death or personal injury caused by negligence, for fraud, or a consumer's statutory rights.
You will defend and indemnify us against claims, damages, and reasonable costs arising from mail sent through your account, from content you put into the service, or from your breach of these terms or the Acceptable Use Policy. This does not apply to the extent the claim is caused by our own breach.
We may update these terms. For material changes we will email account holders at least 30 days before they take effect, and the effective date at the top of this page will change. Continuing to use the service after that date means accepting the new terms. If you do not accept them, cancel before they take effect.
These terms, together with the policies named in section 1, are the whole agreement between us on this subject and replace anything said beforehand.
If a provision is found unenforceable, the rest stays in force. Not enforcing a term on one occasion does not waive it.
You may not transfer this agreement without our consent. We may transfer it to a company that acquires our business, on notice to you.
This agreement is governed by Finnish law. Disputes go to the courts of Finland. If you are a consumer, you keep the protection of the mandatory law of the country you live in, and may use the EU online dispute resolution platform.
Questions about these terms: use the contact form and choose "Legal".